WO2004049643A1

WO2004049643A1 - Communication port control device and method thereof

Info

Publication number: WO2004049643A1
Application number: PCT/JP2002/012449
Authority: WO
Inventors: Yoshihide Morioka
Original assignee: Allied Telesis K.K.
Priority date: 2002-11-28
Filing date: 2002-11-28
Publication date: 2004-06-10
Also published as: AU2002354123A1; US20040105435A1; JPWO2004049643A1

Abstract

An SNMP program (3) started on a computer (12) successively makes an enquiry on the setting and the status to network device (2-1 to 2-n). Each of the network devices (2-1 to 2-n) which have received the enquiry returns its status and setting of a port (26) in response to the enquiry from the computer (12) (SNMP program (3)). The computer (12) (SNMP program (3)) determines whether any conflict with the status and the setting has occurred in any port (26) every time when the response is returned from the network device (2), and gives the setting of prohibiting the use of a port (26) having any conflict with the status and the setting to the network device (2) including the port (26).

Description

Specification

Communication port management apparatus and method, technical field

The present invention relates to a communication port management device for managing a communication port of a communication device and a method thereof. Background art

Network equipment, such as Roux, has a communication port (hereinafter simply referred to as a port) for connecting a communication cable.

For the port, it is possible to make settings such as use permission Z disapproval, and the port can assume a state where communication is possible or not.

Of these, the setting of use permission Z non-permission is usually made by the user, but it is uncertain which initial setting at the time of factory shipment.

For example, if ports that are not connected continue to operate with the network enabled without being configured by the user and enabled by default, these ports will be There is a possibility of unauthorized use or misuse by a third party.

For example, Patent Documents 1 to 4 disclose methods of performing network management by using the SNMP protocol, focusing on the ports of network devices.

However, none of these suggests measures to solve the problems caused by leaving unused ports available as described above.

[Patent Document 1] Japanese Patent Application Laid-Open No. 2000-19092

[Patent Document 2] Japanese Patent Application Laid-Open No. 2000-100101

[Patent Document 3] Japanese Patent Application Laid-Open No. 2000-201

[Patent Document 4] Japanese Patent Application Laid-Open No. 2000-200101 Publication of the Invention The present invention has been made in view of the above-described problems of the related art, and has as its object to provide a communication port management apparatus that manages ports of network devices and a method thereof.

It is another object of the present invention to provide a communication port management device and a communication port management method capable of effectively preventing a trouble due to an unused port of a network device being set to be usable.

[Communication port management device]

In order to achieve the above object, a communication port management device according to the present invention is a communication port management device that manages one or more communication ports of each of one or more communication devices. A first setting information indicating a setting made for each of the communication ports, a first state information indicating a state of each of the communication ports, or a first state information including any of these. (1) information acquisition means for acquiring communication device information, second setting information indicating a setting for each of the communication ports, and first state information (1) included in the acquired first communication device information. (Second state information) or information holding means for holding second communication device information including any of the above, the obtained first communication device information, and the held second communication Based on the location information, and a communication port Bok management means for managing a soluble whether the use of each of the communication ports.

Preferably, the first communication device information includes at least the first setting information, the second communication device information includes at least the second setting information, and the information acquisition unit includes: Acquiring at least the first setting information from each of the communication devices; the information holding means holding at least the second setting information; and the communication boat managing means acquiring the first setting information. And use of the communication port in which the stored second setting information does not match.

Preferably, the first setting information and the second setting information indicate whether or not each of the communication ports can be used, and the communication port management unit includes the acquired first setting information and the held Prohibit the use of communication ports that do not match the second setting information. Preferably, the communication port management means prohibits the use of a communication port in which the acquired first setting information indicates that it can be used and the held first setting information indicates that it cannot be used.

Preferably, the first communication device information includes at least the first state information, the second communication device information includes at least the second state information, and the information acquisition unit includes: Acquiring the first state information from each of the communication devices, the information holding unit sequentially holds at least the acquired first state information as the second state information, and the communication port The management means manages whether or not each of the communication ports can be used, based on a change over time of the second state information.

Preferably, the first state information and the second state information indicate a use state of each of the communication ports, and the communication port management unit may change the second state information inappropriately. Prohibit the use of communication ports.

Preferably, the state indicated by the first state information and the second state information is a first state indicating that the communication boat is usable, and that the communication port is unusable. A second state indicating that the communication port is being tested, and a third state indicating that the communication port is being tested. Prohibits the use of communication ports that indicate improper transitions between states.

Preferably, the first communication device information includes the first setting information and the first state information, the second communication device information includes at least the second state information, and the information The acquisition unit acquires the first setting information and the first state information from each of the communication devices, and the information holding unit acquires at least the acquired first state information and the second state information. The communication port management means sequentially stores the acquired first setting information and the second state information based on a temporal change of the second state information. Manage the availability of

Preferably, the states indicated by the first state information and the second state information are a first state indicating that the communication port is usable, and a state indicated by the communication port. A second state indicating that the communication port is unusable, and a third state indicating that the communication port is being tested, wherein the communication port management means transmits the second state information for a certain period of time. As described above, the use of the communication port indicating the second or third state is prohibited. Preferably, at least the first communication device information, the acquisition of the first communication device information by the information acquisition unit, and the management of the communication boat by the communication port management unit include S NMP ( Compliant with Si Immediate Ne Nerk Management Protocol)

[Description of communication port management device]

Hereinafter, the communication port management device according to the present invention will be schematically described with reference to examples.

The following examples are intended to embody the present invention and to facilitate the understanding thereof, and are not intended to limit the technical scope of the present invention.

The communication port management device according to the present invention is connected to a network device (communication device) such as a router or a switch. In the network device, each of the ports used for connection with a personal computer or a server is set to sNMP.

(Simple Network Management Protocol).

The database (information storage means) of the communication port management device has information indicating whether communication of each port of the network device (communication device) is permitted or not in advance (second setting information). Is stored.

In accordance with the SNMP, for example, at a certain time interval or when detecting that any change has been made to the network configuration, the information acquisition means can send the information to each of the network devices (communication devices). Make an inquiry to

An SNMP agent is running on the network device (communication device), and the SNMP agent responds to an inquiry from the communication port management device to make the settings (permissions not permitted) for each port. The permission and the like; the first setting information) and the status of each port (communication possible Z impossible, etc .; the first status information) are returned to the communication port management device side. The communication port management device sequentially transmits at least the latter (second status information) of the setting status (first communication device information) of each port returned from the network device (communication device). Store it in the database (information storage means).

When a certain port corresponds to, for example, the following (1) and (2), the communication port management means sets the network device (communication device) to disallow use of the port.

(1) Setting mismatch:

When the setting of the port returned from the network device (communication device) is "permitted for communication" even though the setting of the port stored in the database (information storage means) is not permitted-"

(2) Mismatch between setting and status:

When the setting of the port stored in the database (information storage means) is permitted to use, but the status of the port returned from the network device (communication device) is communication disabled or under test.

(3) State instability:

When the status of the port stored in the database (information storage means) over time is inappropriate or unstable, and there is a possibility that the port may be damaged or illegally used by a third party.

(4) Applicable to user definition:

In addition, when the setting and status of the port returned from the network device (communication device) and the setting and status of the port stored in the database (information storage means) are in a predefined combination.

[Communication port management method]

Further, a communication port management method according to the present invention is a communication port management method for managing one or more communication ports of each of one or more communication devices. First setting information indicating a setting made for each port, first state information indicating a state of each communication port, or first communication device information including any of them is acquired. , Previous Second setting information indicating the setting for each of the communication ports, and first state information (second state information) included in the acquired second communication device information, or any one of these. Holding the second communication device information, and managing whether or not each of the communication ports can be used based on the obtained first communication device information and the held second communication device information; .

Preferably, the first communication device information includes at least the first setting information, and the second communication device information includes at least the second setting information. Acquiring the first setting information, holding at least the second setting information, and using a communication port in which the acquired first setting information does not match the held second setting information. Ban.

Preferably, the first communication device information includes at least the first state information, and the second communication device information includes at least the second state information. Acquiring first state information, and at least sequentially holding the acquired first state information as the second state information, based on a temporal change of the second state information, It manages the availability of each communication port.

Preferably, the first communication device information includes the first setting information and the first state information, the second communication device information includes at least the second state information, and the communication Acquiring the first setting information and the first state information from each of the devices, and sequentially holding at least the acquired first state information as the second state information; and It manages whether or not each communication port can be used based on the first setting information and the change over time of the second state information. [Program]

Further, the program according to the present invention is a program that manages each of one or more communication ports of each of one or more communication devices, and is executed by each of the communication devices for each of the communication ports. First setting information indicating the setting of the communication port, and first state information indicating the state of each of the communication ports. Or acquiring first communication device information including any of these, second setting information indicating a setting for each of the communication ports, and included in the acquired first communication device information. A step of holding first state information (second state information) or second communication apparatus information including any of the first state information (second state information); the acquired first communication apparatus information; And a step of managing whether or not each of the communication ports can be used based on the second communication device information.

Preferably, the first communication device information includes at least the first setting information, the second communication device information includes at least the second setting information, and the first communication device information Obtaining the at least the first setting information from each of the communication devices, and holding the second communication device information, holding at least the second setting information, and In the step of managing whether or not each can be used, use of a communication port in which the acquired first setting information does not match the held second setting information is prohibited.

Preferably, the first communication device information includes at least the first state information, the second communication device information includes at least the second state information, and the first communication device information Obtaining the first state information from each of the communication devices, and holding the second communication device information, wherein at least the obtained first state information is In the step of sequentially holding as the second state information and managing whether or not each of the communication boats can be used, based on a change over time of the second state information, each of the communication ports Manage the availability of these.

Preferably, the first communication device information includes the first setting information and the first state information, the second communication device information includes at least the second state information, Acquiring the first setting information and the first state information from each of the communication devices in the step of acquiring the communication device information, and holding the second communication device information in each of the communication devices; In the step of sequentially holding the acquired first state information as the second state information and managing whether or not each communication port can be used, the acquired first setting information Management of whether or not each of the communication ports can be used, based on information and a change over time of the second state information. BRIEF DESCRIPTION OF THE FIGURES

FIG. 1 is a diagram illustrating a configuration of a network system 1 to which a communication port management method according to the present invention is applied.

FIG. 2 is a diagram illustrating a configuration of the network device 2 shown in FIG. FIG. 3 is a diagram showing a configuration of the network management computer 12 shown in FIG.

FIG. 4 shows the SNM executed by the computer 12 shown in FIGS. 1 and 3.

FIG. 6 is a diagram showing a configuration of a P program 3.

FIG. 5 is a flowchart showing the processing (S20) of the port setting unit 3222 of the SNMP program 3 shown in FIG.

FIG. 6 is a diagram showing a normal sequence (S10) when the setting state of the port 26 is normal in the network system 1 shown in FIG.

FIG. 7 is a diagram showing an abnormal sequence (S14) when an abnormality occurs in the setting and state of the port 26 in the network system 1 shown in FIG. BEST MODE FOR CARRYING OUT THE INVENTION

Hereinafter, embodiments of the present invention will be described.

[Network system 1]

As shown in Fig. 1, the network system 1 is composed of one or more network devices 2-1 to 2-n (n≥l) such as hubs, routers, and switches, and a computer 12 for network management. A configuration connected via a management communication line 100 is adopted.

Network device 2::! 2 to n each have one or more communication ports 26-1 to 26-m (m ≥ 1; see below with reference to FIG. 2). A communication node 104 such as a computer or a server is connected to each of the computers, and the communication node 104 is connected to a network 102 such as a LAN or an Internet via network devices 2-1 to 2-m. Perform data communication between them.

In the following, when any of a plurality of possible components, such as the network devices 2-1 to 2-m, is indicated without specifying it, it may be simply abbreviated to the network device 2 or the like.

[Network equipment 2]

FIG. 2 is a diagram illustrating a configuration of the network device 2 shown in FIG. As shown in FIG. 2, the network device 2 is, for example, a switching hap device, which is a control circuit 20 including a CPU and its peripheral circuits, a memory 124, a recording device 160, a communication device 140, a switch 22, a network interface (Network IF) 24 and port 26— ;! ~ 26—m

[2 control circuits]

In the network device 2, the control circuit 20 executes a communication control program (not shown) supplied via a recording medium or the like, and executes a switch 22, a network IF 24 and a port 26-1 to 26-m. Communication control for.

The control circuit 20 executes an SNMP (Simple Network Management Protocol) agent program which is also supplied via a recording medium or the like, and executes an SNMP based on a MIB (Management Information Base) defined in RFC1213. Providing Agent Function to Computer 12 (FIG. 1) Specifically, the control circuit 20 provides the following function to the computer 12 (FIG. 1).

Computer 12 to port 26—! In response to this inquiry, the control circuit 20 refers to the settings of the ports 26-1 to 26-m-1-26-m, Setting information indicating whether use permission has been set for (iiAdminStatus = UP) or whether use permission has been set (iiAdminStatus = DOWN) for the ) To computer 12.

When the computer 12 (FIG. 1) inquires about the status of each of the ports 26-26-m, the control circuit 20 responds to these inquiries, and the ports 26-1-2-26_m_ 1 to 26—m Refer to the status of each, and check whether each of them is available (ifOperStatus = UP), disabled (ifOperStatus = DOWN), or , Test condition

Status information (the second setting information) indicating whether the status is changed to “Computer 12”.

However, the information returned from the network device 2 to the convenience store 12 for controlling the port 26 can be selected as necessary.

That is, the network device 2 may return to the computer 12 both the setting information and the status information, one or both of them, and other information added to both.

Further, when the setting is made for each of the boats 26-1 to 26-m from the computer 12 (Fig. 1), the control circuit 20 controls the ports 26-1 to 26-m-:! _26_m is set, and use permission setting (iiAdminStatus = UP) or use permission setting (ifAdminStatiis = DOWN) is performed for each of these settings. '

[Computer 12]

FIG. 3 is a diagram showing the configuration of the network management computer 12 shown in FIG.

As shown in FIG. 3, the computer 12 includes a CPU 122, a memory 124 and a computer main body 120 including these peripheral circuits, a communication device 140 for communicating with the computer and the network device 2, a recording device such as a CD device and an HDD. It comprises a device 160 and a display and input device 180 including a display device and a keyboard.

That is, the computer 12 includes a component as a general computer that can communicate with the network device 2.

[SNMP program 3] FIG. 4 is a diagram showing a configuration of the SNMP program 3 executed by the computer 12 shown in FIGS.

As shown in FIG. 4, the SNMP program 3 includes an SNMP processing unit 30, a port management unit 32 including a port monitoring unit 320 (information acquisition unit) and a port setting unit 322 (communication port management unit), and a MIB. It consists of an information database (MIB information DB) 340 and a DB section 34 (information holding means) including a setting and status DB 342.

The SNMP program 3 is, for example, supplied to the computer 12 via the recording medium 162 (FIG. 2), loaded and executed in the memory 124, and performs network management based on SNMP for each of the network devices 2.

The SNMP program 3 manages the port 26 of each of the network devices 2 (FIGS. 1 and 2).

In other words, the SNMP program 3 inquires each of the network devices 2 about the settings and status of each of the ports 26, and based on the response to the inquiry, the ports 26 each of which has inappropriate settings for each of the network devices 2. Is set to disallow use.

In the SNMP program 3, the SNMP processing unit 30 performs network management based on SNMP for each of the network devices 2 (FIGS. 1 and 2).

The MIB information DB 340 of the DB section 34 is network equipment 2— :! 22—n (FIGS. 1 and 2) Various settings for each port 26 are stored and used for the port management unit 32.

The settings stored in the MIB information DB 340 include the above-described setting of permission / non-permission (iiAdminStatus = UP / DOWN) for each of the ports 26.

Setting * Status If the DB 342 has the setting information in the response returned from the network device 2 (FIGS. 1 and 2), the setting information of the port 26 returned from each of the network devices 2 (the second setting) Information) is stored for use by the port manager 32. If the status information is included in the response returned from the network device 2, the setting / status DB 342 sequentially stores the status information (second status information) of each of the ports 26 returned from each of the network devices 2, The information is stored and used for the port management unit 32 as information indicating the state of each port 26 over time.

Settings · Status Some of the statuses stored by DB 342 include port 26 (see

2) Unavailable state Each state includes the unusable state test state (ifOperStatus = UP / DOWN / TEST).

Note that, similarly to the information returned from the network device 2 to the computer 12 (FIG. 1), the information stored by the MIB information DB 340 and the setting * status DB 342 for port management can be selected as necessary. is there.

Therefore, as required by the processing, the section 34 stores both the setting information and the status information, one or both of them, and other information added thereto.

The boat monitoring section 320 of the boat management section 32 periodically transmits the network equipment via the SNM processing section 30 periodically, such as once a day, or when a change in the configuration of the network system 1 is detected. 2-1 to network device 2—n (Fig. 1 and Fig. 2) Port 26 ~ 26m Inquires about the settings and status of each, and responds to these inquiries for network devices 2; ~ 2 Receives the response returned from each of n.

The port monitoring unit 320 also stores the setting information and status information of each of the ports 26-1-26-m included in the response from each of the network devices 2-1 to 2-n in the setting / status DB 342. Remember.

[Port setting section 322]

When a response is received from the network device 2 via the SNMP processing unit 30, the port setting unit 322 refers to the information stored in the MIB information DB 340 and the setting / status DB 3 42, and The port 26 (FIG. 2) is managed via the SNMP processing unit 30.

Specifically, the port setting unit 322 sets the port 26 (FIG. 2) corresponding to the following conditions (1) to (4) to a state where use is not permitted. (1) Setting mismatch:

MIB information Port where the setting information returned from network device 2 indicates that communication is allowed (ifAdminStatiis = UP) even though the information stored in DB340 indicates that use is not allowed (ifAdrainStatus = DOWN). 26 (Due to concerns about unauthorized use by third parties)

(2) Mismatch between setting and status:

Despite the setting of the port stored in the MIB information DB 340 being allowed to use (ifAdminStatus = UP), the status information over time stored in the setting / status DB 342 is used for communication for a certain period of time or more. Port 26 indicating impossible or under test (iiOperStatus = DOWN / TEST) (because device failure is a concern)

(3) State instability:

Setting · Status DB 342 Time-lapse status information stored is communicable. Communication not possible. Improper and unstable change such as intermittent transition during Z test (iiOperStatus = UP / DOWN / TEST). Boat 26 (because of fear of port failure or unauthorized use by third parties)

(4) Applicable to user definition:

In addition, the setting and status indicated by the setting information and status information returned from the network device 2 and the setting information and status information stored in the MIB information DB 340 and the setting / status DB 342 are predefined by the user. If it becomes a combination.

However, the port setting unit 322 can appropriately select conditions for disabling the use of the port 26 from the above (1) to (4) as necessary. Can be set to disable the use.

The processing of the port setting unit 322 and other components of the SNMP program 3 will be further described with reference to FIG.

FIG. 5 is a flowchart showing the processing (S20) of the port setting unit 322 of the SNMP program 3 shown in FIG.

As shown in FIG. 5, the port monitoring unit 320 is transmitted through the SNMP processing unit 30. Then, an inquiry about the status 'setting' is sequentially transmitted to each of the network devices 2.

In step 200 (S 200), the port monitoring unit 320 determines whether or not a response has been received from the network device 2 (FIGS. 1 and 2) that has inquired about the state ′ via the SNMP processing unit 30. .

When the SNMP program 3 receives the response from the network device 2, the process proceeds to S206, otherwise, the process proceeds to S206.

In step 202 (S202), the port monitoring unit 320 determines whether or not a predetermined time has elapsed while the network device 2 does not return a response to the inquiry.

If a certain time has elapsed in this state, the SNMP program 3 proceeds to the processing of S204, and otherwise returns to the processing of S200.

In step 204 (S204), the SNMP program 3 performs the above processing for the network device 2 that has not returned a response, and ends the processing.

In step 206 (S206), the port monitor 320 analyzes the received response and stores necessary information in the MIB information DB 340 and the setting / status DB 342.

Further, the control circuit 206 notifies the boat setting unit 322 of the network device 2 that has returned the response.

The port setting unit 322 refers to the MIB information DB 340 and the setting / status DB 342, returns a response, and acquires information necessary for managing the port 26 of the network device 2 to be managed.

In step 208 (S208), the port setting unit 322 determines whether or not the setting for the port 26 to be managed in the MIB information DB 340 is permission to use (ifAdminStatus = UP).

The SNMP program 3 proceeds to the processing of S214 if the setting for the port 26 to be managed is permitted to use, otherwise proceeds to the processing of S210. In step 210 (S210), the port setting unit 322 determines whether the status information over time of the managed port 26 stored in the setting-status DB 342 indicates an inappropriate or unstable change. Judgment of whether or not it is indicated (see condition (3) above).

The SNMP program 3 proceeds to S220 if the status information indicates an inappropriate or unstable change, and otherwise proceeds to S212.

In step 2 12 (S2 1 2), the SNMP program 3 stores the setting and status indicated by the setting information and status information returned from the network device 2, and the MIB information DB 340 and the setting and status DB 342. It is determined whether the setting information and the status information are in a combination defined in advance by the user (see condition (4) above).

If the combination is defined by the user, the SNMP program 3 proceeds to the process of S220, otherwise proceeds to the process of S14.

In step 2 14 (S 2 1 4), the port setting section 3 2 2 checks the setting of the managed port 26 stored in the setting-status DB 342 and the managed port 26 returned from the network device 2. It is determined whether or not there is a discrepancy with the setting of (see Condition (1) above).

Specifically, for example, the port setting unit 322 determines whether or not the setting for the management target port 26 returned from the network device 2 is not permitted (ifAdminStatus = DOW).

If the setting for the port 26 is not permitted, the SNMP program 3 proceeds to the process of S220, otherwise proceeds to the process of S216.

In step 2 16 (S 2 16), the port setting unit 322 performs management based on the setting information of the boat 26 to be known stored in the setting-status DB 342 and the status information returned from the network device 2. It is determined whether there is any inconsistency with the state of the target port 26 (see condition (2) above).

Specifically, for example, the port setting unit 3 22 sets the status of the port 26 stored in the setting / status DB 342 to the status of being unavailable or being tested (ifOperStatus = DOWN / TEST) for a certain time or more Staying and usable (ifOperStatus = UP) It is determined whether or not to return to.

The SNMP program 3 proceeds to the process of S220 if the port 26 does not return to the usable state for a fixed time or more, and otherwise proceeds to the process of S218.

In step 2 18 (S218), the SNMP program 3 determines that the port 26 to be managed is operating normally, and ends the processing.

In step 220 (S220), the port setting unit 322 determines that the port 26 to be managed is in an abnormal state (a state corresponding to any of the above conditions (1) to (4)).

Further, the port setting unit 322 makes a setting (port use prohibition) of disabling use of the port 26 for the network device 2 to be managed via the SNMP processing unit 30.

[Overall operation]

Hereinafter, the overall operation of the network system 1 will be described.

[Normal operation]

First, normal operation will be described.

FIG. 6 is a diagram showing a normal sequence (S10) when the setting and state of the port 26 are normal in the network system 1 shown in FIG.

As shown in FIG. 6, for example, the SNMP program 3 is started on the computer 12 at regular time intervals, and sequentially sets the setting and status of each of the network devices 2-1 to 2-n (FIG. 1, etc.). An inquiry is made (S100, S104, S108).

In response to the inquiry from the computer 12 (SNMP program 3), each of the network devices 2-1 to 2-6 receiving the inquiry returns a response including the status information and the setting information of the port 26 (S102, S102). 106, S110).

Computer 12 (SNMP program 3) is network device 2 Each time a response is returned, the processing shown in FIG. 4 (S20) is performed. If none of the ports 26 satisfies the above conditions (1) to (4), the network device 2-1 to 2 —N Do not make any settings for each and end the process.

After a further elapse of a certain period, the SNMP program 3 is started in the computer 12, and performs the processing shown in S100 to S110.

[Abnormal operation]

Next, the abnormal operation will be described.

FIG. 7 is a diagram showing an abnormal sequence (S14) when an abnormality occurs in the setting state of the port 26 in the network system 1 shown in FIG.

As shown in FIG. 7, for example, the SNMP program 3 started on the computer 12 sequentially inquires each of the network devices 2-1 to 2-n (FIG. 1, etc.) about the setting and status (S 140, S14, S150).

In response to the inquiry from the computer 12 (SNMP program 3), each of the network devices 2-1 to 2-6 receiving the inquiry returns a response including the status information and the setting information of the port 26 (S142). , S146, S152).

The computer 12 (SNMP program 3) performs the processing (S20) shown in FIG. 4 every time a response is returned from the network device 2. For example, if one of the ports 26 of the network device 2-1 is If any of the above conditions (1) to (4) is met, the use of port 26 corresponding to any of the conditions (1) to (4) is prohibited for the network device 2-1. Make settings.

As described above, according to the communication port management device and the method thereof according to the present invention, ports of network devices can be managed.

Further, according to the communication port management device and the method thereof according to the present invention, it is possible to effectively prevent a problem caused by an unused port of a network device being set to be usable. Industrial applicability The communication port management device and method according to the present invention can be used for managing ports of network devices.

Claims

The scope of the claims

1-a communication port management device that manages one or more communication ports of each of one or more communication devices,

First setting information indicating a setting made to each of the communication ports from each of the communication devices; first state information indicating a state of each of the communication ports; or Information acquisition means for acquiring communication device information of

Second setting information indicating a setting for each of the communication ports, and first state information (second state information) included in the acquired first communication device information, or a second state information including any of these. Information holding means for holding the communication device information of (2),

Communication port management means for managing whether or not each communication port can be used based on the obtained first communication device information and the held second communication device information;

A communication port management device having:

2. The first communication device information includes at least the first setting information, and the second communication device information includes at least the second setting information,

The information obtaining means obtains at least the first setting information from each of the communication devices,

The information holding unit holds at least the second setting information, and the communication port management unit sets a communication port in which the acquired first setting information does not match the held second setting information. Ban the use of birds

The communication port management device according to claim 1. '

3. The first setting information and the second setting information indicate whether each communication port can be used,

The communication port management means may include the acquired first setting information and the holding Prohibits the use of communication ports that do not match the second setting information

The communication boat management device according to claim 2.

4. The communication port management means indicates that the obtained first setting information is usable, and prohibits the use of the communication port indicating that the held first setting information indicates unusable.

The communication port management device according to claim 3.

5. The first communication device information includes at least the first state information, and the second communication device information includes at least the second state information.

The information obtaining means obtains the first state information from each of the communication devices,

The information holding means sequentially holds at least the obtained first state information as the second state information,

The communication port management means manages the availability of each of the communication ports based on a change over time of the second state information.

The communication port management device according to claim 1.

6. The first state information and the second state information indicate a use state of each of the communication ports,

The communication port management means prohibits use of a communication port in which the second state information changes inappropriately.

The communication port management device according to claim 5.

7. The state indicated by the first state information and the second state information is a first state indicating that the communication port is usable, and a second state indicating that the communication port is not usable. And a third state indicating that the communication port is being tested,

The communication port management means may be configured so that the second state information is the first to third Prohibits the use of communication ports that indicate improper transitions between states

The communication port management device according to claim 6.

8. The first communication device information includes the first setting information and the first state information, and the second communication device information includes at least the second state information,

The information acquisition unit acquires the first setting information and the first state information from each of the communication devices,

The information holding unit sequentially holds at least the acquired first state information as the second state information,

The communication port management means manages whether or not each of the communication ports can be used based on the acquired first setting information and a change over time of the second state information.

The communication port management device according to claim 1.

9. The state indicated by the first state information and the second state information is a first state indicating that the communication port is available, and a second state indicating that the communication port is unavailable. And a third state indicating that the communication port is being tested,

The communication port management means prohibits use of a communication boat indicating that the second state information is in the second or third state for a predetermined time or more.

The communication port management device according to claim 8.

.

10. At least, the first communication device information, the acquisition of the first communication device information by the information acquisition means, and the management of the communication port by the communication port management means are performed by SNMP (Simple The communication port management device according to any one of claims 1 to 9, which conforms to Ne twork Management Protocol.

1 1. One or more communication ports that each of the one or more communication devices has A communication port management method for managing each of them,

First setting information indicating a setting made to each of the communication ports from each of the communication devices; first state information indicating a state of each of the communication ports; or Second setting information indicating the setting for each of the communication ports, and first state information (second state information) included in the obtained first communication apparatus information, Or holds a second communication device information containing any of these,

Based on the acquired first communication device information and the held second communication device information, manages whether or not each communication port can be used.

Communication port management method.

12. The first communication device information includes at least the first setting information, and the second communication device information includes at least the second setting information;

Acquiring at least the first setting information from each of the communication devices, holding at least the second setting information,

Prohibit use of communication port where the acquired first setting information and the held second setting information do not match.

12. The communication port management method according to claim 11.

13. The first communication device information includes at least the first state information, and the second communication device information includes at least the second state information.

Acquiring the first state information from each of the communication devices,

At least, the acquired first state information is sequentially held as the second state information, and

Managing whether or not each of the communication ports can be used based on a temporal change of the second state information

13. The communication port management method according to claim 11 or 12.

1. The first communication device information includes the first setting information and the first The second communication device information includes at least the second state information,

Acquiring the first setting information and the first state information from each of the communication devices,

Managing whether or not each communication port can be used based on the acquired first setting information and the change over time of the second state information

A communication boat management method according to any one of claims 11 to 13.

15. A program for managing one or more communication ports of each of one or more communication devices,

First setting information indicating a setting made for each of the communication ports from each of the communication devices; first state information indicating a state of each of the communication ports; or Obtaining the communication device information of 1;

Second setting information indicating a setting for each of the communication ports, and first state information (second state information) included in the acquired first communication device information, or a second state information including any of these. Holding the second communication device information, and managing the availability of each of the communication ports based on the obtained first communication device information and the held second communication device information. A program that causes a computer to execute and.

. 16. The first communication device information includes at least the first setting information, and the second communication device information includes at least the second setting information.

In the step of acquiring the first communication device information, at least acquiring the first setting information from each of the communication devices,

In the step of holding the second communication device information, holding at least the second setting information, In the step of managing whether or not each communication port can be used, the use of a communication port in which the acquired first setting information does not match the held second setting information is prohibited.

The program according to claim 15.

17. The first communication device information includes at least the first state information, and the second communication device information includes at least the second state information.

In the step of acquiring the first communication device information, acquiring the first state information from each of the communication devices,

In the step of retaining the second communication device information, at least the acquired first state information is sequentially retained as the second state information, and the availability of each of the communication ports is managed. Managing the availability of each of the communication ports based on a temporal change of the second state information in the step

17. The communication port management method according to claim 15 or 16.

18. The first communication device information includes the first setting information and the first state information, and the second communication device information includes at least the second state information.

In the step of acquiring the first communication device information, acquiring the first setting information and the first state information from each of the communication devices,

In the step of holding the second communication device information, at least the first state information acquired above is sequentially held as the second state information,

In the step of managing whether or not each communication port can be used, based on the first setting information obtained above and the change over time of the second state information, the usage of each communication port is determined. Manage availability

A program according to any one of claims 15 to 17.